Malicious PDF — malware analysis report

Static analysis result for SHA-256 e69b5e5ef9d60143…

MALICIOUS

PDF

16.3 KB Created: 2019-04-30 05:27:19 +01:00 Authoring application: mPDF 5.7
MD5: 11199a9836968af826e787f2401c844e SHA-1: f154df7a5ab94c731514c397078d4f12d8d89ed7 SHA-256: e69b5e5ef9d60143b51ff99a4d82e8e9fab74a40d8bbb2093ca8aed98e208068
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF document contains a large number of embedded links pointing to external PDF files hosted on the 'loaminoo.linkpc.net' domain. This behavior is indicative of a link farm or a redirection scheme designed to lead users to potentially malicious content. The ML classifier strongly supports the malicious verdict.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9898

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/2096097095099094/Long-Time-Coming-by-Sandra-Brown.pdf
    • http://loaminoo.linkpc.net/2096098096090094/Long-Time-Coming-by-Scarlett-Parrish.pdf
    • http://loaminoo.linkpc.net/9098095095094090/Gravity-Well-by-Melanie-Joosten.pdf
    • http://loaminoo.linkpc.net/2092097097099097/A-Long-Time-Coming-The-Inspiring-Combative-2008-Campaign-and-the-Historic-Election-of-Barack-Obama-by-Evan-Thomas.pdf
    • http://loaminoo.linkpc.net/5099096095092/A-Long-Long-Time-Ago-and-Essentially-True-by-Brigid-Pasulka.pdf
    • http://loaminoo.linkpc.net/6092093096092099/The-Long-Exile-by-Melanie-McGrath.pdf
    • http://loaminoo.linkpc.net/9099099092094092/Long-Time-Dying-Box-Set-Long-Time-Dying-1-3-by-Solomon-Carter.pdf
    • http://loaminoo.linkpc.net/2091093095097094/Long-time-Listener-First-time-Werewolf-Kitty-Norville-1-3-by-Carrie-Vaughn.pdf
    • http://loaminoo.linkpc.net/2095091092090093/Stick-Man-The-Long-Awaited-Coming-Of-Age-Novel-by-Richard-Rossi.pdf
    • http://loaminoo.linkpc.net/2094099095094097/Until-The-End-of-Time-by-Melanie-Schuster.pdf
    • http://loaminoo.linkpc.net/5098093097093096/Good-Time-Phone-A-Novella-by-Melanie-Conty.pdf
    • http://loaminoo.linkpc.net/6091091097092096/The-Right-Stock-at-the-Right-Time-Prospering-in-the-Coming-Good-Years-by-Larry-R-Williams.pdf
    • http://loaminoo.linkpc.net/4090091096092/A-Long-Time-Gone-by-Karen-White.pdf
    • http://loaminoo.linkpc.net/7096090096099/A-Long-Time-Until-Now-by-Michael-Z-Williamson.pdf
    • http://loaminoo.linkpc.net/8092095097094/Long-Time-No-See-87th-Precinct-32-by-Ed-McBain.pdf
    • http://loaminoo.linkpc.net/4093098094090092/Long-Time-Gone-The-Cimarron-Legacy-2-by-Mary-Connealy.pdf
    • http://loaminoo.linkpc.net/2090099090092092/Time-Enough-for-Love-The-Lives-of-Lazarus-Long-by-Robert-A-Heinlein.pdf
    • http://loaminoo.linkpc.net/4094092098095092/Star-Wars-Omnibus-A-Long-Time-Ago-Vol-2-by-Archie-Goodwin.pdf
    • http://loaminoo.linkpc.net/3099092096092099/The-Long-Dark-Tea-time-of-the-Soul-Dirk-Gently-2-by-Douglas-Adams.pdf
    • http://loaminoo.linkpc.net/4091093096097093/Long-Journey-Home-Revisioning-the-Myth-of-Demeter-and-Persephone-for-Our-Time-by-Christine-Downing.pdf
    • http://loaminoo.linkpc.net/2094099095094097/Until-The-End-of-Time-by-Melanie-Schuster

Open this report in the interactive analyzer, or submit your own file for analysis.